azuresql-db-ci

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [External Container Image Reference]: The skill references a container image located at sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io/azure-sql/db-dev:latest. This image is hosted on an Azure Container Registry (ACR), which is a standard Microsoft-managed service. The skill correctly instructs users to use secret variables (ACR_USERNAME, ACR_PASSWORD) to handle authentication for this private registry.
  • [Command Execution Patterns]: The skill provides scripts for GitHub Actions and other CI environments that utilize docker exec and sqlcmd to provision and seed the database. These are standard practices for integration testing environments and are used here to initialize a local development database context.
  • [Data Ingestion Considerations]: The skill includes a step to seed the database by copying and executing a seed.sql file.
  • Ingestion points: The seed.sql file is copied into the container and executed via sqlcmd in SKILL.md.
  • Boundary markers: The skill relies on standard CI step isolation.
  • Capability inventory: Uses docker cp, docker exec, and shell commands for environment setup.
  • Sanitization: Standard SQL execution is performed; users should ensure the seed.sql content is sourced from trusted local files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 08:19 PM